{
  "port": 9101,
  "protocol": "tcp",
  "service": "Bacula Director / JetDirect port 2",
  "oneLiner": "Either a Bacula backup Director or the second raw-print port on a multi-port print server.",
  "whatItIs": "IANA registers 9101 to the Bacula Director, the daemon that schedules backup jobs and that bconsole and the Bareos fork's console connect to. The same port is also the second AppSocket/JetDirect print channel on multi-port HP print servers, so nmap labels it both ways. Which one you have is usually obvious from the host: a backup server or a printer.",
  "exposure": {
    "verdict": "never",
    "note": "The Director is the control plane for every backup and restore in the estate; it authenticates with shared secrets from the config files and belongs on a management network, not the internet."
  },
  "checkCommand": "nc -vz -w 3 TARGET 9101",
  "links": [
    {
      "title": "IANA port registry — 9101 (bacula-dir)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=9101",
      "kind": "iana"
    },
    {
      "title": "Bacula documentation",
      "url": "https://www.bacula.org/documentation/",
      "kind": "official-docs"
    },
    {
      "title": "bareos/bareos (Bareos, the widely packaged Bacula-derived backup suite)",
      "url": "https://github.com/bareos/bareos",
      "kind": "github"
    }
  ]
}